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IMAGE DATA DISTRIBUTION METHOD AND SYSTEM, IMAGE DATA AND 

RECORDING MEDIUM 

TECHNICAL FIELD 

The present invention pertains to technology for network distribution of 
5 a digitized image; particularly, to an image data distribution method and a system 
therefore as well as image data to be utilized therein. 

BACKGROUND OF THE INVENTION 

In general, since digital image data distributed via a network, such as the 
Internet, can be easily duplicated without impairing the picture quality, such data should 

10 be protected against illegal use; for example, against redistribution and/or duplication 
by unauthorized individuals. Thus, Japanese Kokai Patent Application No. Hei 
9[1997]-191394, for example, discloses a method referred to as an electronic watermark 
or digital watermarking, which has been developed in order to embed copyright and 
source information in the image data to be distributed. 

15 However, this type of electronic watermarking, which merely adds the 

copyright source, has the problem that even when illegal use occurs, the distribution 
route of the data, that is, when, to which clients, and under what conditions was the data 
distributed, could not be specified. Thus, for example, Japanese Kokai Patent 
Application No. 2000-50047 discloses a data distribution method in which information 

20 for designating the distribution destination is embedded in the image data. However, 
even with this data distribution method, because no information on which user is 
responsible is contained, the redistribution route of data is unlikely to be specified 
accurately. 

Thus, the purpose of the present invention is to present an image data 
25 distribution method and a system therefor with which actual use of distributed image 
data by users can be found accurately, the redistribution route of the data can be 
specified easily in the event of an illegal use, and illegal use of the image data can be 
prevented or effectively curtailed. 
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SUMMARY OF THE INVENTION 

The present invention concerns an image data distribution method that 
contains a step in which image data distributed from the server side is unarchived to a 
memory on the client side, and user security data is then added to the unarchived image 
5 data in order to prevent illegal use of image data resulting from the distribution of 
image data from the server side to the client side via a network. 

Accordingly, security data, that is, user or client identification data for 
the prevention of illegal use, can be added to the image data by the client who received 
the distributed image data, so that if the image data is used illegally, its redistribution 

10 route can be easily traced. Thus, an effective psychological restraint against the illegal 
use of image data can be achieved. 

In a particular application example, a process in which the user security 
data is transmitted from the client side to the server side and a step in which said 
security data is stored in a storage device on the server side are included wherein 

1 5 security data added to given image data and the security data stored on the server side 
can be cross-referenced in the event of illegal use of the image, so that the redistribution 
route of the image data can be more accurately traced. 

Preferably, the security data may be added to image data in the form of 
an electronic watermark. 

20 More preferably, the security data can be added to the image data by 

selecting several pixels at non-adjacent positions locations among the pixels for the 
image data unarchived to a memory and by increasing or decreasing the luminance 
level of the pixels selected. 

In one possible embodiment, the present invention concerns an image 

25 data distribution method that it includes a step in which an instruction is given so that 
the client can gain access to a security controller which performs authorization for 
image data distribution in response to a request made by the client, and a step in which 
an electronic key for unarchiving the image data is transmitted from the security 
controller to the client side in response to the authorization request for image data 

30 distribution from the client side on the server side in order to prevent illegal use of 
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image data resulting from the distribution of image data from the server side to client 
side via a network. 

When distribution destinations are verified in advance in this manner, 
the image data can be prevented from being distributed to unauthorized users or clients. 
5 In a particular application example, a step for storing the communication 

status on the client side is provided. Accordingly, said distribution destination can be 
easily identified on the server side after the distribution of image data, so that in the 
event of illegal use, its redistribution route can be easily traced. 

In another application example, it is desirable that a security controller 

10 be provided separately from the server used for image data distribution, and the client 
side is instructed to gain access to the security controller using a IP address given to it. 

In another application example of the present invention, a storage 
medium containing software for the execution of said image data distribution method is 
presented on the client side or the server side. 

1 5 In yet another possible embodiment of the present invention, the image 

data distribution method includes a method for distributing image data from a server to 
clients and comprises a step in which an instruction for the client side to gain access to 
a security controller is given from the server side in response to a request for image data 
by the client, a step in which the client gains access to the security controller in order to 

20 be authorized for image data distribution, a step in which image data corresponding to 
the request is transmitted from the server side to the client side, a step in which an 
image key for opening the image data is transmitted from the server side to the client 
side, a step in which the image data is unarchived using the image key on the client 
side, and user security data is added to said image data, and a step in which the image 

25 data to which the security data has been added is output. 

When so configured, because distribution destinations can be verified in 
advance in order to prevent image data from being distributed to unauthorized users or 
clients, and a client who actually received the image data can add security data, that is, 
user or client identification data for the prevention of illegal use, to the image data, the 

30 redistribution route in the event of illegal use of the image data can be easily traced. 
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Therefore, not only can the illegal use of image data be effectively prevented, but also 
there results a strong psychological restraint against the illegal use of image data. 

In another application example, because a step in which the security data 
is transmitted to the server side and a step in which said security data is stored by the 
5 server are further provided, in the case of illegal use of image data, the security data that 
has been added to the image data and the security data stored by the server can be 
cross-referenced in order to trace and specify the redistribution route of the image data 
more accurately. 

In another application example, because the server is further provided 
10 with a step in which communication status with the client is stored in a log file, a client 
or user culpable of illegal use can be specified more accurately and easily. 

In addition, in another application example, it is desirable that a security 
controller be provided separately from the server used for image data distribution, and 
access to the security controller is instructed by giving an IP address to the client side. 
15 In another application example, image data transmitted from the server 

side is compressed, so that the security data can be added after said image data is 
unarchived on the client side. 

In addition, it is desirable that the security data be added to the image 
data in the form of an electronic watermark. 
20 In a specific application example, the security data can be added to the 

image data by selecting several pixels at non-adjacent positions locations among the 
pixels for the image data unarchived using the image key and by increasing or 
decreasing the luminance level of the selected pixels. 

The date and time of the distribution of the image data, user ID, and the 
25 serial number of the client storage device storing the image data or the IP address of the 
client may be included in the security data. When they are utilized, the redistribution 
route after the distribution of the image data can be easily traced. 

The present invention also provides an image data distribution system 
that is equipped with an image file server having an image file database containing 
30 image files, a security control server having a user database containing registration data 
on respective users and an image key database containing image keys for unarchiving 
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respective image files to clients, and a network for connecting the image file server, the 
security control server, and the clients; wherein, the image file server has a function of 
instructing a client to gain access to the security control server in response to a request 
from said client for image data and a function of transmitting the image data requested 
5 to the client, the client has a function of gaining access to the security control server to 
request for user authorization in order to obtain the image data, the security control 
server has functions of verifying via the user database, the user in response to the 
client's request for authorization and of then transmitting the image key to the requested 
image data from the image key database, and the client is further provided with 

10 functions for unarchiving the image data received using the image key and for adding 
user security data to said image data. 

When so configured, distribution destinations can be authorized in 
advance in order to prevent image data from being distributed to unauthorized users or 
clients, and the redistribution route of image data can be specified easily, since security 

1 5 data, that is, user or client identification data, is added to the image data by the client 
who received the image data, so that an image data distribution method with which 
illegal use of image data can be prevented and psychologically discouraged more 
reliably than ever can be realized. 

In a particular application example, because the client has also the 

20 function of transmitting the security data to the security control server, and the security 
control server also has the function of storing the security data, the security data in the 
image data and the one stored in the security control server can be cross-referenced at a 
later time. 

In another application example, because the security control server has a 
25 log file to store the communication status with a client, the image data distribution 
status can be ascertained more accurately. 

It is desirable that the image file server give the instruction for gaining 
access to the security control server through the provision of the IP address. 

In a particular application example, image data transmitted from the 
30 image file server is compressed, so that the client unarchives the image data received 
before adding the security data. 
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It is desirable that the client add the security data to the image data in the 
form of an electronic watermark. 

In addition, it is convenient if the security data contain the date and time 
of the distribution of the image data, user ID, and the serial number of the client's 
5 storage device storing the image data or the IP address of the client when specifying the 
redistribution route of the image data. 

Furthermore, the present invention also provides image data with 
embedded user information by increasing or decreasing the luminance levels of several 
selected pixels placed at discrete locations on a map of pixel data represented by dots. 

10 BRIEF DESCRIPTION OF THE DRAWINGS 

Figure 1 is a diagram showing the outlined configuration of a preferred 
application example of the image data distribution system in accordance with the 
present invention. 

Figure 2 is a flowchart showing the process of image data distribution in 
1 5 the image data distribution system in Figure 1 . 

DETAILED DESCRIPTION OF THE INVENTION 

Figure 1 shows the outline of a system configuration on the Internet as a 
preferred application example of the image distribution system in accordance with the 
present invention. The image distribution system in the present application example is 

20 configured with multiple clients (2) connectable via a network environment, such as the 
Internet (1), an image filer server (3), and a security control server (4). The client (2) is 
a computer provided with functions for transmitting a request specifying a desired 
image to the image file server (3) using WWW browser on the Internet (1) in order to 
receive digital image data from said server and for regenerating the image. 

25 The image file server (3) is made of a computer for transmitting image 

data in response to the request from the client (2) on the Internet and provided with a 
file database (5) containing image files and a log file (6) for storing communication 
status with the client (2). Furthermore, the image file server (3) has the function of 
transmitting an IP address for the security control server (4) in response to the request 
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for image data from the client (2) in order to instruct the client (2) to gain access to the 
security control server and the function of transmitting the requested image data from 
the image file database (5) to the client. 

In the present application example, compressed hierarchized image files 
5 having a data structure in which digitized image data is hierarchized once according to 
the significance of the information the respective pixels have (for example, luminance 
level or changes in luminance level). The pixels are then restructured and for another 
example, stored in the image file database (5). These hierarchized image files can be 
generated using, for example, the image compression method described in the 

10 specifications of International Patent Application Nos. PCT/JP00/04472, PCT/JP/05801 
and PCT/JPOO/05802, all by the inventor of the present application, and all of which are 
incorporated herein by reference. Said hierarchized image files comprise information 
on the positions and the luminance levels of respective pixels. Because the images 
differ in terms of quality, that is, resolution, depending on their ranking and size, the 

1 5 client can specify the image quality when requesting image data. 

The security control server (4) has a user database (7) containing the 
contents of the registrations of users who are allowed to utilize the image files in the 
image file database (5), an image key database (8) containing the necessary image keys 
for unarchiving the image files, and a log file (9) for storing communication statuses with 

20 clients (2). Respective users and their identification data are classified into several groups 
and registered in the user database (7) of the present application example. Each group is 
granted certain rights, so that they select the corresponding quality, that is, resolution, and 
size. 

The client (2) can gain access to the security control server using the IP 
25 address for the security control server (4) received from the image file server (3) in 
order to request for authorization to acquire the image data. The security control server 
(4) verifies the user through database (7) in response to said authorization request and 
transmits an image key peculiar to the image data requested from the image key 
database (8). 

30 The client (2) is also able to unarchive the image data received from the 

image file server (3) into the memory using the image key and to add user security data 
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to said image data. Said security data contains identification data on the client or user, 
such as the date and time of the distribution of the image data, user ID, serial number of 
the storage device, for example, a hard disk drive, to which the image data was 
downloaded, IP address of the client (2), which are useful for tracing the redistribution 
5 route in the event of illegal use. 

Next, a preferred application example of the image distribution method 
in accordance with the present invention will be explained using Figure 2. First, the 
client (2) activates a general-purpose or WWW-dedicated browser in order to get 
connected to the image file server (3) via the Internet. Once the client (2) transmits a 

10 request specifying the name and the quality of the desired image file (step SI), the 
image file server (3) returns an IP address for the security control server (4) (step S2). 
The client (2) gains access to the security control server (4) using said IP address in 
order to request for authorization to acquire the image data (step S3). User ID, client's 
IP address, and serial number of the hard disk drive as data peculiar to the client are 

15 utilized for said authorization. 

The security control server (4) verifies registered data, such as user ID, 
in reference to the user database (7) before granting authorization (step S4). Then, an 
image key peculiar to the image data requested is obtained from the image key database 
(8) and transmitted to the client (2) (step S5), and the status of this communication is 

20 stored in the log file at the same time (9) (step S6). On the other hand, the image filer 
server (3) obtains the image data requested from the image file database (5) and 
transmits it to the client (2) (step S7). Similarly, the image file server (3) also stores the 
communication status with the client (2) in the log file (6). 

The client (2) opens and decompresses the image data received from the 

25 image file server (3) using the image key received from the security control server (4) 
and unarchives it to memory as a pixel data map of the respective pixels constituting the 
image (step S8). Then, the security data is encoded and added to the unarchived image 
data (step S9). In general, the addition of security data is achieved using a so-called 
electronic watermark or an electronic window. In the present application example, an 

30 electronic watermark can be inserted by selecting several pixels placed at non-adjacent 
discontinuous positions locations among the pixels for the unarchived image data and 
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increasing or decreasing the luminance levels of the pixels. The positions of the pixels 
can be selected in advance, and they can be also changed depending on the contents of 
the image. 

The image data to which the security data has been added in said manner 
5 is output (step S10) and can be utilized in a variety of ways; for example, displayed 
directly on the client's display, stored in a storage device, such as a hard disk drive, or 
other storage media; or transmitted on-line to another apparatus. At the same time, the 
client (2) transmits the security data to the security control server (4) (step SI 1), and the 
security control server (4) stores it in the log file (9) (step SI 2). 

10 As a result, because a record on the distribution of the image data is kept 

in the security control server (4), in the event of subsequent illegal use of the image 
data, its redistribution route can be easily specified by cross-referencing the security 
data embedded in the image data. In addition, in the present application example, 
because the image file server (3) and the security control server (4) are provided 

15 separately, security data transmitted from clients can be managed once the address of 
the security control server (4) is preset on the network even when the image file server 
(3) is set to an arbitrary address as needed, that is, when the image file database (5) is 
set to an arbitrary address. 

In another application example of the present invention, the image file 

20 server (3) and the security control server (4) can be integrated in order to use a single 
server for the configuration. In this case, access to the security control server (4) and 
use of the image key can be omitted. That is, the client (2) first requests authorization 
from the server for image distribution; and after the server has granted authorization in 
reference to the user database (7) in response to said request, the client (2) requests 

25 distribution of the desired image in order to have the image transmitted. Needless to 
say, in this case, too, after the client has opened the image data and unarchived it into 
the memory, security data is added to the image data in the same manner as that in the 
application example and transmitted to the server, and the server stores it into the log 
file. 

30 Moreover, in yet another application example, the IP address for the 

security control server (4) can be added to the image data distributed from the image file 
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server (3) in advance. In this case, upon receiving an image data distribution request from 
the client (2), the image file server (3) transmits the image data requested. The client (2) 
reads the IP address from the image data received and gains access to the security control 
server (4) in order to request authorization. Once the security control server (4) completes 
authorization and transmits the image key, the client (2) is able to open the image data 
using said image key. 

A number of examples of the present invention have been explained in 
detail herein. As is clear to an expert in the field, the present invention can be 
implemented with various kinds of changes and modifications to the example herein 
within the scope of the invention. For example, in one embodiment, the present 
invention can also be applied to a network other than the Internet and the steps carried 
out in the same manner as described herein. 

From the foregoing it will be appreciated that, although specific 
embodiments of the invention have been described herein for purposes of illustration, 
various modifications may be made without deviating from the spirit and scope of the 
invention. Accordingly, the invention is not limited except as by the appended claims. 
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2 

Claims 

1 . A method for delivering image data, characterized by including a process that develops 
image data delivered from a server side on a memory at a client side and adds security data of a 
user to the image data developed in order to prevent illegal use of the image data in the delivery 
of the image data to the above-mentioned client side via a network from the above-mentioned 
server side. 

2. The method for delivering image data of Claim 1 , characterized by further including a 
process that transmits the security data of the above-mentioned user to the above-mentioned 
server side from the above-mentioned client side and a process that stores the above-mentioned 
security data in a storage device of the above-mentioned server side. 

3. The method for delivering image data of Claim 1 or 2, characterized by adding the 
above-mentioned security data as an electronic window to the above-mentioned image data. 

4. The method for delivering image data of any of Claims 1-3, characterized by the fact 
that the above-mentioned security data are added to the above-mentioned image data by selecting 
several picture elements existing at noncontinuous positions among respective picture elements 
of the above-mentioned image data developed on the memory and increasing or decreasing the 
luminance of the above-mentioned picture elements selected. 

5. A method for delivering image data, characterized by including a process that instructs 
a client side to access a security controller for certifying image data delivery in response to a 
request from the above-mentioned client at a server side in order to prevent illegal use of image 
data in the delivery of the image data to the above-mentioned client side via a network from the 
above-mentioned server side; a process that delivers an electronic key for opening the image data 
to the above-mentioned client side from the above-mentioned security controller in response to 
the certification request of the image data delivery from the above-mentioned client side. 

6. (Deletion) 

7. (Deletion) 

8. (Deletion) 

9. A method for delivering image data, characterized the fact that in a method for 
delivering image data to a client from a server, it includes a process that instructs the 
above-mentioned client side to access a security controller from the server side in response to the 
request of the image data from the client side, a process that accesses the above-mentioned 
security controller from the above-mentioned client side and demands the certification of an 
image data delivery, a process that transmits the image data corresponding to the 
above-mentioned request to the above-mentioned client side from the above-mentioned server 
side, a process that transmits an image key for opening the above-mentioned image data to the 
above-mentioned client side from the above-mentioned server side, a process that opens the 
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above-mentioned image data by using the above-mentioned image key at the above-mentioned 
client side and adds security data of the user or client to said image data, and a process that 
outputs the image data to which the above-mentioned security data are added. 

10. (Deletion) 

11. (Deletion) 

12. (Deletion) 

13. (Deletion) 

14. (Deletion) 

15. (Deletion) 

16. (Deletion) 

17. An image data delivery system, characterized by the fact that it is equipped with an 
image file server that has an image file database in which image files are stored, a security 
control server that has a user database in which registered data of each user are stored and an 
image key database in which image keys for opening the above-mentioned each image file are 
stored, clients and a network that connects the above-mentioned image file server, the 
above-mentioned security control server, and the above-mentioned clients; and it has a function 
that instructs an above-mentioned client to access the above-mentioned security control server in 
response to the request of image data from the above-mentioned client by the above-mentioned 
image file server, a function that transmits the image data requested to the above-mentioned 
client, a function that accesses the above-mentioned security control server by the 
above-mentioned client and requests certification of the above-mentioned image data acquisition 
of the user, a function that responds to the request of certification from the above-mentioned 
client by the above-mentioned security control server, confirms the above-mentioned user 
database, gives the certification to the above-mentioned user, and transmits the image keys of the 
above-mentioned requested image data from the above-mentioned image database, and a function 
that opens the above-mentioned received image data by the above-mentioned client using the 
image keys and adds security data of the above-mentioned user to the above-mentioned image 
data. 

18. (Deletion) 

19. (Deletion) 

20. (Deletion) 

21. (Deletion) 

22. (Deletion) 

23. (Deletion) 
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24. Image data, characterized by the fact that information of a user is embedded by 
increasing or decreasing the luminance of several selected picture elements which are constituted 
by a map of picture element data of individual dots with positions that are not continuous. 

25. (Addition) The method for delivering image data of Claim 5, characterized by the fact 
that the above-mentioned image data have image files of varying image quality; and the request 
from the above-mentioned client includes a designation of image quality. 

26. (Addition) The method for delivering image data of Claim 25, characterized by the 
fact that the above-mentioned image data have image files with a data structure which is made 
hierarchical by the image quality. 

27. (Addition) The method for delivering image data of Claim 25 or 26, characterized by 
the fact that the above-mentioned image quality is the resolution or size of the images. 

28. (Addition) The method for delivering image data of any of Claims 5 and 25-27, 
characterized by further including a process that saves a communication condition with the 
above-mentioned client side. 

29. (Addition) The method for delivering image data of any of Claims 5 and 25-28, 
characterized by the fact that access to the above-mentioned security controller is instructed by 
giving an IP address of the above-mentioned security controller. 

30. (Addition) A recording medium for storing software to implement the method for 
delivering image data of any of Claims 1-3, 5, and 25-29. 

3 1 . (Addition) The method for delivering image data of Claim 9, characterized by the fact 
that the above-mentioned image data have image files of varying image quality; and the request 
from the above-mentioned client includes a designation of image quality. 

32. (Addition) The method for delivering image data of Claim 31, characterized by the 
fact that the above-mentioned image data have image files with a data structure which is made 
hierarchical by the image quality. 

33. (Addition) The method for delivering image data of Claim 31 or 32, characterized by 
the fact that the above-mentioned image quality is the resolution or size of the images. 

34. (Addition) The method for delivering image data of any of Claims 9 and 31-33, 
characterized by further including a process that transmits the above-mentioned security data to 
the above-mentioned server side and a process that saves said security data at the 
above-mentioned server side. 

35. (Addition) The method for delivering image data of any of Claims 9 and 31-34, 
characterized by further including a process that saves a communication conditions with the 
above-mentioned client side in a log file at the above-mentioned server side. 
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36. (Addition) The method for delivering image data of any of Claims 9 and 31-35, 
characterized by the fact that access to the above-mentioned security controller is instructed by 
giving an IP address of the above-mentioned security controller. 

37. (Addition) The method for delivering image data of any of Claims 9 and 31-36, 
characterized by the fact that the above-mentioned image data being transmitted from the 
above-mentioned server side are compressed; and after said image data are expanded at the 
above-mentioned client side, the above-mentioned security data are added. 

38. (Addition) The method for delivering image data of any of Claims 9 and 31-37, 
characterized by the fact that the above-mentioned security data are added as an electronic 
window to the above-mentioned image data. 

39. (Addition) The method for delivering image data of any of Claims 9 and 31-38, 
characterized by the fact that the above-mentioned security data are added to the 
above-mentioned image data by selecting several picture elements existing at discontinuous 
positions among respective picture elements of the above-mentioned image data, opened by 
using the above-mentioned image key, and increasing or decreasing the luminance of the 
above-mentioned picture elements selected. 

40. (Addition) The method for delivering image data of any of Claims 9 and 31-39, 
characterized by the fact that the delivery date of the above-mentioned image data, user ID, serial 
number of the storage device of the above-mentioned client in which the above-mentioned image 
data are stored, or IP address of the above-mentioned client are included in the above-mentioned 
security data. 

41 . (Addition) The image data delivery system of Claim 17, characterized by the fact that 
the above-mentioned image data have image files of varying image quality; and the request from 
the above-mentioned client includes a designation of image quality. 

42. (Addition) The image data delivery system of Claim 41, characterized by the fact that 
the above-mentioned image data have image files with a data structure which is made 
hierarchical by the image quality. 

43. (Addition) The image data delivery system of Claim 41 or 42, characterized by the 
fact that the above-mentioned image quality is the resolution or size of the images. 

44. (Addition) The image data delivery system of any of Claims 17 and 41-43, 
characterized by further having a function that transmits the above-mentioned security data to the 
above-mentioned security control server by the above-mentioned client and a function that saves 
the above-mentioned security data by the above-mentioned security control server. 

45. (Addition) The image data delivery system of any of Claims 17 and 41-44, 
characterized by the fact that the above-mentioned security control server has a log file for saving 
a communication conditions with the above-mentioned client. 
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46. (Addition) The image data delivery system of any of Claims 17 and 41-45, 
characterized by the fact that the above-mentioned image file server instructs an access to the 
security control server by giving an IP address of the above-mentioned security control server. 

47. (Addition) The image data delivery system of any of Claims 1 7 and 41 -46, 
characterized by the fact that the above-mentioned image data being transmitted from the 
above-mentioned file server are compressed; and after said image data received are expanded by 
the above-mentioned client, the above-mentioned security data are added. 

48. (Addition) The image data delivery system of any of Claims 17 and 41-47, 
characterized by having a function that adds the above-mentioned security data as an electronic 
window to the above-mentioned image data by the above-mentioned client. 

49. (Addition) The image data delivery system of any of Claims 17 and 41-48, 
characterized by the fact that delivery date of the above-mentioned image data, user ID, serial 
number of the storage device of the above-mentioned client in which the above-mentioned image 
data are stored, or IP address of the above-mentioned client are included in the above-mentioned 
security data. 



ABSTRACT OF THE DISCLOSURE 



An image distribution system is configured with multiple client connectable 
via a network environment, such as Internet, an image file server having image file database 
containing image files and log file, user database, and security control server having image 
key database and log file. Image data from the image file server can be opened once the 
client who made the image data request gains access to the security control server using an IP 
address obtained from the image file server, is granted authorization, and obtains an image 
key. The client encodes security data, such as the date and time of the distribution of the 
image data, user ID, serial number of hard disk drive, and client's IP address, in order to 
embed it in the image data unarchived into its memory in the form of an electronic watermark 
and transmits the security data to the security control server in order to store it in the log file 
at the same time. 
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